Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/hJbHpAPOiNkNScuafVbq5FNZ7D4.roa
File: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (raw, json)
Hash identifier: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=
Subject key identifier: 84:96:C7:A4:03:CE:88:D9:0D:49:CB:9A:7D:56:EA:E4:53:59:EC:3E
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 01942369789E89D2143D4ED09E211DCF6ACB
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/hJbHpAPOiNkNScuafVbq5FNZ7D4.roa
Signing time: Wed 01 Jan 2025 19:48:22 +0000
ROA not before: Wed 01 Jan 2025 19:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.44.176.0/24 maxlen: 24
185.44.177.0/24 maxlen: 24
209.127.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:78:9e:89:d2:14:3d:4e:d0:9e:21:1d:cf:6a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jan 1 19:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8496c7a403ce88d90d49cb9a7d56eae45359ec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:62:59:4a:b3:14:31:03:68:3e:f8:aa:1f:
14:8b:99:e7:21:d9:ae:94:13:86:25:ed:1f:ed:59:
d2:d5:72:82:bc:e9:e7:e6:43:4d:99:76:10:19:71:
ff:e1:60:94:2e:d4:05:eb:e8:61:2b:64:8b:16:2a:
2e:f6:13:ab:27:e2:1c:9e:cd:78:bc:e5:8f:c9:ee:
9b:48:cf:6f:34:54:d2:e7:28:e8:96:10:bc:73:67:
3c:2e:8c:6c:33:5f:1e:30:ce:56:bc:53:ea:5e:31:
e9:1b:00:17:02:25:df:15:2f:07:12:f2:74:ba:ce:
9c:8c:a1:ae:32:32:72:b1:d4:a2:a8:e3:7b:33:6f:
2f:4d:fe:0d:d2:d2:0b:9d:07:96:05:94:60:17:ca:
f7:31:a7:16:8f:2a:8b:36:79:b2:1e:3f:b8:4e:23:
09:5f:43:1a:b9:ac:b3:49:02:4d:be:73:ad:59:a2:
eb:ff:a3:4b:57:9e:b9:e7:83:4f:c5:a2:17:05:ab:
6e:85:33:44:76:67:3d:b9:66:55:5c:77:5a:a4:5f:
3d:2e:b6:21:ee:df:a8:5a:fc:8d:44:93:5d:b7:4e:
57:5a:fa:d3:57:3e:eb:86:41:46:d3:80:4b:e5:09:
9f:67:ea:6d:a9:1e:99:04:42:f0:b2:a7:95:09:b7:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:C7:A4:03:CE:88:D9:0D:49:CB:9A:7D:56:EA:E4:53:59:EC:3E
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/hJbHpAPOiNkNScuafVbq5FNZ7D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.176.0/23
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:5a:df:9f:56:61:b5:e6:b4:dd:93:a8:ca:88:16:e6:ca:26:
4f:ad:b9:ca:b7:c5:7d:9d:7b:d6:73:16:16:36:2b:8b:cc:1f:
87:25:ad:e1:81:2d:24:e8:92:d1:07:5b:40:2a:08:bd:12:91:
4a:b5:0e:98:9c:8c:80:1e:fc:71:0d:fc:0c:01:7c:77:d1:8f:
4b:26:29:9d:12:ad:3b:e1:ba:3d:cc:14:6d:78:2a:13:6c:9b:
45:d7:ef:5d:29:0a:2c:e3:a1:c5:de:7f:63:64:56:47:c6:d5:
4a:36:3c:ca:cd:53:90:6b:17:2d:84:fb:bd:e8:0f:f3:d1:0a:
d1:53:ce:0c:90:4f:ae:16:34:7c:37:85:b6:c3:2e:4a:45:ee:
ae:b3:e8:84:8a:4a:ed:d6:30:35:ff:94:62:59:52:f6:9f:79:
ec:8d:61:5f:b3:79:67:70:8a:26:9f:61:45:03:38:ec:53:a4:
4c:b3:7d:27:0d:0c:63:5b:f8:dd:da:42:62:d8:77:7a:31:0f:
ab:3f:38:fb:e9:f6:b0:8a:3a:4f:f3:3e:e4:20:84:93:83:ab:
17:4f:f6:a8:b7:fd:97:bd:a8:3f:c7:96:ff:ff:3e:62:28:67:
e4:68:e4:f0:62:0f:c1:19:5c:ff:85:f5:ed:86:33:1a:ba:27:
f5:cf:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:44 2025 by rpki-client